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The listing of claims will replace ail prior versions, and listings, of claims in the 

application: 

Listing of Claims 

1. (Currently Amended) Method of authentication, wherein a client (Gt) 
requests a file from a server (SV), whereby the client and the server share a common 
secret value (S) and thereby belong to an accepted group, and whoroby comprising the 
step of: 

the client forms a first message (M1) compris i ng including 
a filename (FN), 

a nonce (N) which is associated with the given filename (FN), 
a first hash value (H(S^FN); 10) according to a first hash function (H1, H2) 
formed from the filename (FN) and the secret value (S). 

2. (Currently Amended) Method according to claim 1, wher e in the s e rv e r 
further comprising the step of the server extracting 

e xtracts the filename (FN) of a received first message (M4), 
e xtracts extracting the first hash value (4^, 

forms forming a value of the received filename (FN) and the secret value (S), 
forms forming a second hash value (H(S^FN);20) according to the first hash 
function (H1, H2) formed from the value of the filename (FN) and the secret value (S), 
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compar e s comparing the first hash value (40) with the second hash value (20) 
and if the values are the same, e stabl i sh e s establishing that the first message (M4) 
stems from a client belonging to the accepted group, othenA^ise establ i shes establishing 
that the client does not belong to the accepted group. 

3. (Currently Amended) Method according to claim 1 0f-2, wherein the server 
responds to the request from the client by forming a second message (M2) compr i sing 
including 

a file (F) corresponding to the requested filename 
the received nonce (N) which is associated with the given filename (FN), 
a third hash value (H(S^FN);30) according to a second hash function (H3, H^) 
formed from the value of the received nonce (N) and the secret value (S). 

4. (Currently Amended) Method according to claim 3, wh e r e in th e c l i e nt 
further comprising the step of the client 

e xtracts extracting the file (F) of the received second message (M2), 
e xtracts extracting the third hash value (30) from the second message, 
forms forming a value of the nonce (N) associated with the filename (FN) and the 
secret value (S), 

forms forming a fourth hash value (H(S^N);^0) according to the second hash 
function (H3, H 4 ) formed from the value of the nonce (N) associated with the requested 
filename and the secret value (S), 
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compar e s comparing the third hash value (SO) with the fourth hash value (40) 
and if the values are the same e stab l iGhoo same, establishing that the second message 
(MS) stems from a server belonging to the accepted group, othen^^ise e stab l ishes 
establishing that the server does not belong to the accepted group. 

5. (Currently Amended) Method according to claim 3 oM-, wherein the first 
hash function (H1, H2) is the same as the second hash function (H3, H4) . 

6. (Currently Amended) Method according to any pr e v i ous c l a i m wh e r e in 
claim 1 , the inputs to any resp e ct i v e hash said first hash function (H1, H2) are 
concatenated. 

7. (Currently Amended) Client sharing a common secret value (S) with a 
server, the client and the server thereby belonging to an accepted group, whereby 

the client forms a first message comprising 
a filename (PW), 

a nonce (N) which is associated with the given filename (PW), 

a first hash value (H(S^FN);10) according to a first hash function (H1, H2) 

formed from the values of the filename (FN) and the secret value (S), and 

whereby 

the client receives a second message from the server, the client 
extracting a file (F) of the received second message (M2), 
extracting a third hash value (30) from the second message, 

Preliminary Amendment - Page 5 of 8 

EUS/J/P:04-6223 



Attorney Docket No. P16321-US1 

forming a value of the nonce (N) and the secret value (S), 

forming a fourth hash value (H (S^N) ; ^0) according to a second hash 

function (H3, H^) formed from the value of the nonce (PN) associated with the 

requested filename and the secret value (S), 

comparing the third hash value (30) with the fourth hash value (40) and if 

the values are the same establishing that the second message (M2) stems from 

a server belonging to the accepted group, and if othenvise, establishing that the 

sen/er does not belong to the accepted group. 

8. (Currently Amended) Server sharing a common secret value (S) with a 

client, the client and the server thereby belonging to an accepted group, whereby the 

server receives a first message from the client, the server 

extracting the filename from the received first message 
extracting a first hash value (40) from the received first message (M4^, 
forming a value of the received filename (FN) and the secret value (S), 
forming a second hash value (H(S^FN) ; 20) according to the first hash function 

(H1, H2) formed from the value of the filename (FN) and the secret value (S), 

comparing the first hash value (40) with the second hash value (20) and if the 

values are the same establishing that the first message (M4) stems from a client 

belonging to the accepted group, othenA/ise establishing that the client does not belong 

to the accepted group. 
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9. (Currently Amended) Server according to claim 8, wherein the server 
responds by sending a second message (M2) comprising 

a file (F) corresponding to the requested filename (R4), 

a third hash value (H(S^FN) ; 10) according to a second hash function (H3, H4) 
formed from the value of the received nonce (N) associated with the filename (FN) and 
the secret value (S). 
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